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WHAT IS CLAIMED IS: 

1 . A distributed system with a network having devices with nodes communicating over 
a first channel and nodes communicating over a second channel, one of the devices comprising: 
a secondary storage device comprising: 

a plurality of file system entities, a first of the file system entities accessible by the 
nodes communicating over the first channel and a second of the file system entities accessible by the 
nodes communicating over the second channel; 
a memory comprising: 

an operating system that restricts access to the first file system entity to the nodes 
communicating over the first channel and that restricts access to the second file system entity to the 
nodes communicating over the second channel; and 

one of the nodes that communicates over the first channel that sends a request to 
access the first file system entity to the operating system; and 

a processor for running the operating system and for running the one node. 

2. The distributed system of claim 1 wherein the network is a private network running 
over a public network infrastructure. 
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3 . The distributed system of claim 1 wherein the first file system entity is a file, wherein 
the devices have a plurality of types, wherein the secondary storage device includes a plurality of 
versions of the file, each version suitable to a type, and wherein when the operating system receives 
the request from the one node, the operating system returns the version of the file that is suitable for 
the type of the one device. 

4. The distributed system of claim 1 wherein the operating system maintains a mapping 
between each of the plurality of file system entities and an authorized channel such that nodes 
communicating over the authorized channel are authorized to access the associated file system entity. 

5. The distributed system of claim 4 wherein the operating system includes a function 
that receives a request from the one node, that determines that the one node communicates over the 
first channel, and that returns a list of file system entities where the authorized channel is the first 
channel. 

6. The distributed system of claim 5 wherein the one node is a process with an 
associated proc structure that indicates that the one node communicates over the first channel and 
wherein the function determines that the one node communicates over the first channel by accessing 
the proc structure. 
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7. The distributed system of claim 1 wherein the operating system includes an open 
function that receives a request from the one node to open the first file system entity, that verifies 
that the one node communicates over the one channel, and that opens the first file system entity when 

the open function verifies that the one node communicates over the first channel. 

5 8. The distributed system of claim 1 wherein the operating system includes an unlink 

function that receives a request from the one node to unlink the first file system entity, that verifies 
that the one node communicates over the one channel, and that deletes the one file system entity 
when the unlink function verifies that the one node communicates over the first channel. 

9. A method in a distributed system with a network of nodes communicating over 
1 0 channels, comprising the steps of: 

receiving a request from one of the nodes to access a file system entity, the file system entity 
having an associated authorized one of the channels; 

determining whether the node communicates over the authorized channel; and 
accessing the file system entity when it has been determined that the node communicates over 
1 5 the authorized channel. 

1 0. The method of claim 9, wherein the method further includes the steps of: 
inhibiting access to the file system entity when it has been determined that the node does not 

communicate over the authorized channel. 
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1 1 . The method of claim 9 wherein the file system entity is a file, wherein the network 
has a plurality of devices, each with an associated type, wherein the method is performed by one of 
the devices, and wherein the network stores a plurality of versions of the file, one version for each 
type and wherein the accessing step further includes the steps of: 

identifying the version of the file that is suitable for the type of the one device; and 
accessing the identified version. 

12. The method of claim 9, wherein the method is performed by an operating system. 

13. A distributed system with a network of nodes communicating over channels, 
comprising: 

means for receiving a request from one of the nodes to access a file system entity, the file 

system entity having an associated authorized one of the channels; 

means for determining whether the node communicates over the authorized channel; and 
means for accessing the file system entity when it has been determined that the node 

communicates over the authorized channel. 
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14. A method in a distributed system with a network having nodes communicating over 
channels, the network having a file system with a plurality of file system entities, each with an 
associated authorized channel, the method comprising the steps of: 

receiving a request from one of the nodes communicating over one of the channels, the 
request for viewing the file system; 

determining which file system entities in the file system have an authorized channel as the 
one channel; and 

returning an indication of the determined file system entities. 

15. A computer-readable memory device encoded with a data structure for use by an 
operating system in providing channel-specific views of a file system, the data structure having 
entries, each entry comprising: 

an indication of a file system entity; and 

an indication of a channel that is used by the operating system to restrict access to the file 
system entity to nodes that communicate over the indicated channel. 

1 6. The computer-readable memory device of claim 1 5, wherein the indication of a file 
system entity is an indication of a version of a file and wherein each entry further includes: 

an indication of a device type that is used by the operating system to determine whether a 
requesting node that requests access to the version of the file runs on a device having the indicated 
device type. 
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17. A computer-readable medium containing instructions for controlling a distributed 
system with a network of nodes communicating over channels to perform a method comprising the 
steps of: 

receiving a request from one of the nodes to access a file system entity, the file system entity 

having an associated authorized one of the channels; 

determining whether the node communicates over the authorized channel; and 

accessing the file system entity when it has been determined that the node communicates over 

the authorized channel. 

18. The computer-readable medium of claim 1 7, wherein the method further includes the 
steps of: 

inhibiting access to the file system entity when it has been determined that the node does not 
communicate over the authorized channel. 

1 9. The computer-readable medium of claim 1 7, wherein the file system entity is a file, 
wherein the network has a plurality of devices, each with an associated type, wherein the method is 
performed by one of the devices, and wherein the network stores a plurality of versions of the file, 
one version for each type and wherein the accessing step further includes the steps of: 

identifying the version of the file that is suitable for the type of the one device; and 
accessing the identified version. 
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20. The computer-readable medium of claim 1 7, wherein the method is performed by an 
operating system. 
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